Skip to content
OpenAdvisories

Package · Debian

tinyssh

2 known vulnerabilities.

All Critical High Medium Low Exploited only

2 results · Feed

  • Low 2.5
    CVE-2026-4541

    janmojzis tinyssh Ed25519 Signature crypto_sign_ed25519_tinyssh.c signature verification

    A flaw has been found in janmojzis tinyssh up to 20250501. Impacted is an unknown function of the file tinyssh/crypto_sign_ed25519_tinyssh.c of the component Ed25519 Signature Handler. This manipulation causes improper verification of cryptographic signature.…

    janmojzis tinyssh tinyssh tinyssh Debian Ubuntu
  • Medium 5.9
    CVE-2023-48795 EPSS 94%

    Prefix Truncation Attack against ChaCha20-Poly1305 and Encrypt-then-MAC aka Terrapin

    The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks such that some packets are omitted (from the extension negotiation message), and a client and server…

    openssh lxd erlang openssh Debian Ubuntu Alpine PyPI Go crates.io